GCVE - cpe:2.3:a:qnap:video_station:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:qnap:video_station:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Qnap (`a402dda4-b7da-50eb-b0f8-700e564ee87d`)
Product	Video Station (`8af35402-78a1-5d94-a1c5-d2e20317d78a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-56804`	vulnerable	2026-06-08 06:56:13.164191	Video Station An SQL injection vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.4 and later Published: 2025-10-03T18:08:19.010Z Updated: 2025-10-03T18:35:12.788Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-25-32	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-14025`	vulnerable	2026-06-08 06:25:38.905803	Video Station An SQL injection vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to execute unauthorized code or commands. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later Published: 2026-03-11T08:02:09.214Z Updated: 2026-03-11T13:52:24.375Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-24	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-14024`	vulnerable	2026-06-08 06:25:38.904910	Video Station An improper certificate validation vulnerability has been reported to affect Video Station. If an attacker gains local network access who have also gained an administrator account, they can then exploit the vulnerability to compromise the security of the system. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later Published: 2026-03-11T08:02:03.876Z Updated: 2026-03-11T14:12:35.283Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-24	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-50360`	vulnerable	2026-06-08 06:16:16.025669	Video Station HIGH (8.8) A SQL injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.1 ( 2024/02/26 ) and later Published: 2024-09-06T16:26:55.405Z Updated: 2024-09-06T17:46:27.496Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-24	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47563`	vulnerable	2026-06-08 06:14:25.000556	Video Station HIGH (7.4) An OS command injection vulnerability has been reported to affect Video Station. If exploited, the vulnerability could allow authenticated users to execute commands via a network. We have already fixed the vulnerability in the following version: Video Station 5.8.2 and later Published: 2024-09-06T16:26:50.074Z Updated: 2024-09-06T17:47:03.791Z Open on db.gcve.eu Reference links https://www.qnap.com/en/security-advisory/qsa-24-24	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41288`	vulnerable	2026-06-08 06:11:05.838336	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-41287`	vulnerable	2026-06-08 06:11:05.837785	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34977`	vulnerable	2026-06-08 06:06:26.302067	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34976`	vulnerable	2026-06-08 06:06:26.301590	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-34975`	vulnerable	2026-06-08 06:06:26.300136	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44056`	vulnerable	2026-06-08 05:36:44.857272	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-44055`	vulnerable	2026-06-08 05:36:44.852458	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-28812`	vulnerable	2026-06-08 05:31:24.927619	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-7184`	vulnerable	2026-06-08 05:14:14.045125	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-13071`	vulnerable	2026-06-08 05:08:48.291196	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.